Bot Permissions Contract
Kind of like installing an app on a phone, bots should list the permissions they expect to be able to use (i.e. don't give all bots the same permissions by default, make the developers choose what they need) and the Teams user that's adding a bot can decide whether or not they want to use the bot based on permissions requested by a bot.
13
votes
Austin Brown
shared this idea
1 comment
-
dave
commented
... BEFORE installation. Now I'm stuck with a bot in Teams that wants access to my entire SharePoint site collection. All it does it help schedule meetings with coworkers. MS needs to weed out this datamining nonsense.